The Agent Skills Directory

[EXTERNAL_DOWNLOADS]: The skill suggests installing several standard Laravel community packages for profiling and monitoring purposes:
laravel/pulse (Official Laravel package)
barryvdh/laravel-debugbar (Well-known community package)
laravel/telelescope (Note: This appears to be a typo for the official laravel/telescope package. Since it is within the official laravel/ namespace, it does not pose a third-party typosquatting risk).
[INDIRECT_PROMPT_INJECTION]: The skill utilizes tools such as Read, Grep, and Glob to examine application source code. While this introduces a potential surface for indirect prompt injection if malicious instructions are hidden within the project files being optimized, the skill's focus on structured Laravel patterns and standard development workflows makes this a low-risk architectural characteristic rather than a specific vulnerability.

laravel-performance